RE: "Appropriate" physical safeguards - THE ANSWER

2002-10-18 Thread timmcguinness
--- You are currently subscribed to wedi-privacy as: archive@jab.org To unsubscribe from this list, go to the Subscribe/Unsubscribe form at http://subscribe.wedi.org or send a blank email to [EMAIL PROTECTED] If you need to unsubscribe but your current email address is not the same as the addres

RE: Here is a good Privacy Issue that will cause problems

2003-01-16 Thread timmcguinness
In my personal opinion, this practice - violating patient privacy, in the name of detecting abuse by private businesses - which is (it appears to me) unsupported by statute (unless mandated by DEA regulation) - is contrary to both many state laws and HIPAA.  I agree the practice serves a val

RE: HIPAA privacy and people

2003-01-18 Thread timmcguinness
Well we haven't heard from the AAPS and their supporters for quite a while! Not to worry, private civil litigation will be the enforcement method of choice for those impacted by providers who disregard HIPAA. While some of us have been working with the standards bodies and government to obtain s

RE: EMS and the NPP

2003-01-24 Thread timmcguinness
Indeed Gerald, the statement that they are not required is beyond inaccurate. In fact they are required to give them out at the first reasonable opportunity after the emergency. This can include by mail as well - which is how my local government clients will be handling it with their EMT. Plus w

RE: Is HIPAA Individually Liable?

2003-01-24 Thread timmcguinness
Depends upon the nature of the violation. The organization will be liable for its actions, and individuals for theirs. Generally, it will be individuals who will be held to the criminal sanctions for their actions. However civil liability also accrues to all parties. Expect the litigators to go

RE: Is HIPAA Individually Liable?

2003-01-24 Thread timmcguinness
Ok, here is the straight answer (or my version of it!). The enforcement model for HIPAA is this: The Federal government has two agencies responsible for policing HIPAA. Centers for Medicare and Medicaid Services (CMS) on the Transactions and Code Set side. The HHS Office for Civil Rights (OCR) o

RE: NPP and illiterate population

2003-01-24 Thread timmcguinness
Title: Message Folks, this isn't really a HIPAA issue.  It's a Civil Rights issue.  Also it may be a state law issue.  The answer in general is, and it is many times scalable to the size of the organization, you have to address the issue, or be subject to the civil liability that will come w

RE: NPP and illiterate population

2003-01-27 Thread timmcguinness
Good Point Donald. My concern is that we tend (as a group) to look at the technicalities, and not the risks. You can be legally correct, yet still be sued because of not addressing the risk of being sued. So I think it is important to address both the law, and the perceptions. Overkill in the

RE: Any HIPAA Humor tools out there?

2003-01-30 Thread timmcguinness
How about Helping Insure Politicians Avoid Accountability Regards, Tim McGuinness, Ph.D. Consulting Specialist in Regulatory Privacy, Security, and Application Compliance HIPAA/FDA/CMS-HCFA/ICH/ADA & Section 508/DITSCAP/NIACAP/ISO17799/BS7799/NIST 800 C&A Specialist in Local Government Complianc

RE: Any HIPAA Humor tools out there?

2003-01-30 Thread timmcguinness
John, I have heard that Stetson (Orlando/St. Petersburg) is the one offering this course or seminar - I'm not yet sure.  I heard this from a local attorney.  However, there is quite a bit of movement on the civil litigators side.  In fact there may be a major case emerge in Arizona this nex

RE: Confidential Communications

2003-01-30 Thread timmcguinness
Consider employees of healthcare organizations. An example: an employee of a hospital needs treatment that might affect the employability, or at least their coworkers attitude towards that employee. So the Patient/employee requires confidentiality. This raises a question also, and I would be inte

to listserv admin

2003-11-01 Thread timmcguinness
I greatly value the opinions of this listserv, and am indebted to its participants.  However, I am very concerned about participants who do not identify themselves, and hide behind nebulous entity names.  I would like to ask the listserv admin to enforce the need for attribution, and make su